topic Re: Does Check Point Quantum series support IPoE (IP over Ethernet)? What about in a VSX environment in Firewall and Security Management

Does Check Point Quantum series support IPoE (IP over Ethernet)? What about in a VSX environment?

yoshitaka_aikaw — Wed, 30 Apr 2025 02:50:10 GMT

I'm currently testing whether a Check Point Quantum appliance (e.g., 3600 or 9100 running Gaia OS) can be used in an IPoE environment provided by an ISP.

Specifically, I want to confirm whether the appliance can:

Receive IPv6 Router Advertisements (RA)
Act as a DHCPv6 client (e.g., support Prefix Delegation)

I know that IPv6 addresses can be manually configured on Gaia OS, but I'm looking to verify whether full IPoE behavior (RA/DHCPv6-based auto configuration) is supported when the appliance acts as a client on the WAN side.

In addition, if the appliance is configured in VSX mode, can a Virtual System (VS) act as an IPoE client in the same way?

Has anyone tested this behavior either in standalone or VSX mode with a real IPoE line?
Any experience or known limitations would be appreciated.
Thanks in advance.

Re: Does Check Point Quantum series support IPoE (IP over Ethernet)? What about in a VSX environment

PhoneBoy — Wed, 30 Apr 2025 12:29:59 GMT

Quantum Spark appliances support IPoE, but regular Quantum gateways don’t appear to.
Pretty sure the requested IPv6 functionality is there (at least in R82).

Be aware of issues with Dynamic IP gateways in general: https://support.checkpoint.com/results/sk/sk167473

Re: Does Check Point Quantum series support IPoE (IP over Ethernet)? What about in a VSX environment

yoshitaka_aikaw — Thu, 01 May 2025 06:21:32 GMT

Thanks, that was very helpful.

Looks like VS is out, and non-VS Gaia may support IPoE (DHCPv6/RA), based on the R81.20/R82 docs.

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_Gaia_AdminGuide/Content/Topics-GAG/DHCPv6.htm?TocPath=Network%20Management%7CDHCPv6%7C__

But since Gaia doesn’t support IPv4 over IPv6 tunneling, even with IPoE, IPv4-only clients can't reach the internet.

A bit disappointing, but now it's clear. Thanks again—I'll close the thread.